Simon Bennetts is the OWASP Zed Attack Proxy (ZAP) Project Leader and a Distinguished Engineer at StackHawk, a company that uses ZAP to help users fix application security bugs before they hit production. He has talked about and demonstrated ZAP at conferences all over the world. Prior to making a move into security, he was a developer for 25 years and strongly believes that you cannot build secure web applications without knowing how to attack them. Simon joins us for the second time to refresh our knowledge of Zap, explain how to use Zap as an automation tool in your pipeline, and what he knows about rolling Zap out across an Enterprise. We hope you enjoy this conversation with....Simon Bennetts.FOLLOW OUR SOCIAL MEDIA: ➜Twitter: <a href='https://twitter.com/AppSecPodcast'>@AppSecPodcast</a> ➜LinkedIn:<a href='https://www.linkedin.com/showcase/83990241'> The Application Security Podcast</a> ➜YouTube: <a href='https://www.youtube.com/channel/UCfrTGqjSsFCQW4k6TueuY-A'>https://www.youtube.com/@ApplicationSecurityPodcast</a> Thanks for Listening! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Ochaun Marshall -- IaC and SAST

Chris Romeo and Robert Hurlbut dig into the tips, tricks, projects, and tactics that make various application security professionals successful. They cover all facets of application security, from threat modeling and OWASP to DevOps+security and security champions. They approach these stories in an educational light, explaining the details in a way those new to the discipline can understand. Chris Romeo is the CEO of Devici and a General Partner at Kerr Ventures, and Robert Hurlbut is a Principal Application Security Architect focused on Threat Modeling at Aquia.